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Abstract Labeled state-to-function transition systems, FuTS for short, admit multiple transition 
schemes from states to functions of finite support over general semirings. As such they constitute a 
convenient modeling instrument to deal with stochastic process languages. In this paper, the notion 
of bisimulation induced by a FuTS is addressed from a coalgebraic point of view. A correspondence 
result is proven stating that FuTS-bisimulation coincides with the behavioral equivalence of the asso- 
ciated functor. As generic examples, the concrete existing equivalences for the core of the stochastic 
process algebras PEPA and IML are related to the bisimulation of specific FuTS, providing via the 
correspondence result coalgebraic justification of the equivalences of these calculi. 

1 Introduction 

Process description languages equipped with formal operational semantics are successful formalisms 
for modeling concurrent systems and analyzing their behavior. Typically, the operational semantics is 
defined by means of a labeled transition system following the SOS approach. The states of the transition 
systems are just process terms, while the labels of the transitions between states represent the possible 
actions and interactions. Process description languages often come equipped with process equivalences, 
so that system models can be compared according to specific behavioral relations. 

In the last couple of decades, process languages have been enriched with quantitative information. 
Among these quantitative extensions, those allowing a stochastic representation of time, usually referred 
to as stochastic process algebras, have received particular attention. The main aim has been the integra- 
tion of qualitative descriptions and quantitative analysis in a single mathematical framework by building 
on the combination of labeled transition systems and continuous-time Markov chains. The latter being 
one of the most successful approaches to modeling and analyzing the performance of computer systems 
and networks. An overview on stochastic process algebras, equivalences and related analysis techniques 
can be found in |[T4l [Tll3ll. for example. A common feature of many stochastic process algebras is that 
actions are enriched with the rates of exponentially distributed random variables that characterize their 
duration. Although exploiting the same class of distributions, the models and the techniques underlying 
the definition of the calculi turn out to be significantly different in many respects. A prominent differ- 
ence concerns the modeling of the race condition by means of the choice operator, and its relationship to 
the issue of transition multiplicity. In the quantitative setting, multiplicities can make a crucial distinc- 
tion between processes that are qualitatively equivalent. Several significantly different approaches have 
been proposed for handling transition multiplicity. The proposals range from multi -relations fTTirHI , to 
proved transition systems (23J, to LTS with numbered transitions lfT4l . to unique rate names [9], just to 
mention a few. 
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In 0, Latella, Massink et al. have proposed a variant of LTS, called Rate Transition Systems (RTS). 
In LTS, a transition is a triple (P,a,P') where P and a are the source state and the label of the transition, 
respectively, while P' is the target state reached from P via the transition. In RTS, a transition is a triple 
of the form (P,a,P). The first and second component are the source state and the label of the transition, 
as in LTS, while the third component P is a continuation function which associates a non-negative real 
value to each state P' . A non-zero value for the state P' represents the rate of the exponential distribution 
characterizing the time for the execution of the action represented by or, necessary to reach P' from P 
via the transition. If P maps P' to 0, then state P' is not reachable from P via the transition. The use 
of continuation functions provides a clean and simple solution to the transition multiplicity problem and 
make RTS particularly suited for stochastic process algebra semantics. In order to provide a uniform 
account of the many stochastic process algebras proposed in the literature, in previous joint work of 
the first two authors 00 Labelled State-to-Function Transition Systems (FuTS) have been introduced 
as a natural generalization of RTS. In FuTS the co-domain of the continuation functions are arbitrary 
semirings, rather than just the non-negative reals. This provides increased flexibility while preserving 
basic properties of primitive operations like sum and multiplication. 

In this paper we present a coalgebraic treatment of FuTS that allow multiple state-to-function tran- 
sition relations involving arbitrary semirings. Given label sets X/ and semirings Hi, a FuTS takes the 
general format S = (S, { >-»iKLj ) with transition relations >->, c S x£, x fS( S, Kj). Here, TSiS^i) 
are the sets of functions from 5 to Kj of finite support, a subcollection of functions also occurring in 
other work combining coalgebra and quantitative modeling. We will associate to S the product of the 
functors J r S(-,'Ri)- i - i . For this to work, we need the transition relations to be total and determinis- 
tic for the coalgebraic modeling as a function. Maybe surprisingly, this isn't a severe restriction at all 
in the presence of continuation functions: the zero-continuation As'.O expresses that no LTS-transition 
exists from the state s to any state s'; if s allows a transition to some state s\ as well as a state S2, the 
continuation function will simply yield a non-zero value for s\ and for S2 . 

The notion of <S-bisimulation that arises from a FuTS S is reinterpreted coalgebraically as the be- 
havioral equivalence of a functor that is induced by S, along the lines sketched above. Behavioral 
equivalence rather than coalgebraic bisimulation is targeted, since, dependent on the semirings involved, 
weak pullbacks may not be preserved and the construction of a mediating morphism for a coalgebraic 
bisimulation from a concrete one may fail for degenerate denominators. However, following a familiar 
argument, we show that the functor associated with a FuTS does possess a final coalgebra and therefore 
has an associated notion of behavioral equivalence indeed. It is noted, in the presence of a final coalgebra 
for FuTS a more general definition of behavioral equivalence based on cospans coincides [20]. A corre- 
spondence result is proven in this paper that shows that the concrete bisimulation of a FuTS, coincides 
with behavioral equivalence of its functor. Pivotal for its proof is the absence of multiplicities in the 
FuTS treatment of quantities. 

Using the bridge established by the correspondence result, we continue by showing for two well- 
known stochastic process algebras, viz. Hillston's PEPA iTTTll and Hermanns's IML lfT3l . that the respec- 
tive standard notion of strong equivalence and strong bisimulation coincides with behavioral equivalence 
of the associated FuTS. This constitutes the main contribution of the paper. PEPA stands out as one of 
the prominent Markovian process algebras, while IML specifically provides separate prefix constructions 
for actions and for delays. The equivalences of PEPA and of IML are compared with the bisimulations 
of the respective FuTS as given by an alternative operational semantics involving the state-to-function 
scheme. In passing, the multiplicities have to be dealt with. Appropriate lemmas are provided relating 
the relation-based cumulative treatment with FuTS to the multirelation-based explicit treatment of PEPA 
and IML. 
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Related work on coalgebra includes ||28l [T9l |26l , papers that also cover measures and congruence 
formats, a topic not touched upon here. For the discrete parts, regarding the correspondence of bisim- 
ulations, our work aligns with the approach of the papers mentioned. In this paper the bialgebraic per- 
spective of SOS and bisimulation E71 is left implicit. An interesting direction of research combining 
coalgebra and quantities studies various types of weighted automata, including linear weighted automata, 
and associated notions of bisimulation and languages, as well as algorithms for these notions I6ll25ll5l. 
In particular, building on a result on bounded functors iTTTTl . it is shown in [5] for a functor involving func- 
tions of finite support over a field that the final coalgebra exists. Below, we have followed the scheme 
of to obtain such a result for a functor induced by a FuTS. The notions of equivalence addressed in 
this paper, as often in coalgebraic treatments of process relations, are all strong bisimilarities. 

The present paper is organized as follows: Section [2] briefly discusses some material on semirings 
and coalgebras. Labeled state-to-function transition systems and FuTS as well as the associated notion 
of bisimulation are provided in Section [3] The coalgebraic counterparts of FuTS and FuTS-bisimulation 
are defined in Section [4| where we also establish the correspondence with behavioral equivalence of the 
final coalgebra. In Section [5] the standard equivalence of PEPA is identified with the bisimulation of a 
FuTS and, hence, with behavioral equivalence. In Section [6] the same is done for the language of IMC 
where actions and delays are present on equal footing. Section [7] wraps up and discusses directions of 
future research. An appendix provides the proofs of a number of lemmas. 

2 Preliminaries 

A tuple K = (R, +, 0, *, 1) is called a semiring, if (R, +, 0) is a commutative monoid with neutral ele- 
ment 0, (R, *, 1) is a monoid with neutral element 1 , * distributes over +, and * r = r * = for all r € R. 
As examples of a semiring we will use are the booleans B = {false, true) with disjunction as sum 
and conjunction as multiplication, and the non-negative reals R^o with the standard operations. We will 
consider, for a semiring K and a function ip : X — > K, countable sums YjxeX' f( x ) i n ^> f° r X' 2= X. For 
such a sum to exist we require ip to be of finite support, i.e. the support set spt(<p) = { x e X | ip(x) + } is 
finite. Here, is the neutral element of % with respect to +. 

We use the notation J r S{X,'R) for the collection of all functions of finite support from the set X 
to the semiring H. A construct [x\ t-> r\, ...,x n i-» r„], with x ( - e X, i — 1...H all distinct, r,- e H, i - 
\...n, denotes the mapping that assigns r, to x,-, i — \ ...n, and assigns to all x € X different from 
all Xi. In particular [], or more precisely []«, is the constant function x i-> and X x - [x i-> 1 ] is the 
characteristic function on *R for x € X. For ip e !F<S(X,7?), we write ®(p for the value £ xeX (p(x) in K. For 
<p,if/ e fS{X,'R), the function tp + iff is the pointwise sum of <p and \fr, i.e. (ip + if/)(x) = ip(x) + ifr(x) e *R. 
Clearly, ip + is of finite support as tp and \p are. Given an injective operation | : XxX^X, we define 
ip | iff : X — > H, by (cp \ tA)(X) = <p(x\)* 1H.X2) ifx = x\\x2 for some xi,X2 e X, and (tp \ iff)(x) = otherwise. 
Again, tp \ \p is of finite support as ip and ifr are. This is used in the setting of syntactic processes P that 
may have the form P\ \\a Pi for two processes P\ and P2 and a syntactic operator \\a- 

Lemma 1. Let X be a set, K a semiring, and \ an injective binary operation on X. For (p,tf/ e ^ r <S(X,'^) 
it holds that ®((p + iff) = ©y? + ®ip and ®(ip\4>) = (®tp) * (©(A). □ 

We recall some basic definitions from coalgebra. See e.g. [24] for more details. For a functor T : Set — > 
Set on the category Set of sets and functions, a coalgebra of T is a set X together with a mapping 
a : X — > f(X). A homomorphism between two !F-coalgebras (X,a) and (F,/3) is a function / : X — > Y 
such that < F(f)°a - fi°f. An ^-coalgebra (£l,a>) is called final, if there exists, for every ^-coalgebra 
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(X,a), a unique homomorphism [•]]£ : (X,a) — > Two elements Xi,X2 of a coalgebra (X,a) are 

called behavioral equivalent with respect to T if Qjci]]^ = [felx > n °tation M X T x 2- 

Using a characterization of [12], a functor T on Set is bounded, if there exist sets A and B and 
a surjective natural transformation tj : A x => !F. Here, A x (•) is the functor that maps a set X to 
the Cartesian product A x X and maps a function / : X — > 7 to the mapping Ax/:AxX->Axy 
with (Ax/)(a,i) = (a,/(x)), while denotes the functor that maps a set X to the function space X B 
of all functions from B to X and that maps a function / : X — > F to the mapping f B :X B ^> Y B with 
f B (ip)(b) = f((p(b)). For bounded functors we have the following result, see [1TJ for a proof. 

Theorem 2. If a functor T '■ Set — » Sef is bounded, then its final coalgebra exists. □ 

A number of proofs of results on process languages !P in this paper relies on so-called guarded recur- 
sion 0. Typically, constants X are a syntactical ingredient in these languages. As usual, if X := P, i.e. 
the constant X is declared to have the process P as its body, we require P to be prefix-guarded. Thus, 
any occurrence of a constant in the body P is in the scope of a prefix-construct of the language. Guarded 
recursion assumes the existence of a function c : P — > N such that c{P\ • P2) > max{ c(P\), c(P2) } for all 
syntactic operations • of P, and moreover c(X) > c(P) ifX:=P. 



3 Labeled State-to-Function Transition Systems 

The definition of a labeled state-to-function transition system, FuTS for short, involves a set of states S 
and one or more relations of states and functions from states into a semiring. For sums over arbitrary 
subsets of states to exist, the functions are assumed to be of finite support. 

Definition 1. A FuTS S, in full a labeled state-to-function transition system, over a number of label 
sets X/ and semirings %[, i- I ...n, is a tuple S = (S, ( >-^i)" =l ) such that cSx£fX fS(S,'Ri),for 
i — 1 ...n. • 

As usual, we write s >->, v for (s,£,v) e >-»,•. For a FuTS S - (S, ( ^i) n i=l ) the set S is called the set of 
states. We refer to each >->, as a state-to-function transition relation of S or just as a transition relation of 
it. If for S we have that n = 1 , i.e. there is only one state-to-function transition relation >-» , then S is called 

simple. AFuTS S is called total and deterministic if for each transition relation >->;C5 xX i x? r <S(5,'^,) 

I 

involved and for all s € S , i e X/, we have s >->, v for exactly one v € ( FS{S, < Ri). In such a situation, the 

t 

zero-function []^, plays a special role. A state-to-function transition s >-», []^, reflects the absence of a 

c 

non-trivial transition s >->,• v for v ^ in the context of LTS one says that s has no ^-transition. For 
the remainder of the paper, all FuTS we consider are assumed to be total and deterministic Q 

Examples For the modeling of CCS processes, we choose a set of actions 3\ as label set and the 
booleans B as semiring. Consider the two CCS processes P = a.b.O + a.c.O and Q = a.(b.O + c.O), their 
representation as a FuTS is depicted in Figure[l] For process P we have P A [b.O i-» true, c.O h> true], 
while the process Q we have Q >-> [b.O + c.O h> true]. So, FuTS are able to represent branching. 

As another example of a simple FuTS, Figure [T] displays a FuTS over the action set and the 
semiring R^o of the non-negative real numbers. The functions vo to V4 used in the example have the 
property that ©v,(j) = 1, for i — . . .4. Usually, such a FuTS over R^o is called a (reactive) probabilistic 
transition system. 

'Definition 1 slightly differs in formulation from the one in (S). 
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Figure 1: FuTS for two CCS processes and a probabilistic process. 



In Section [6] we will provide semantics for the process language IML of interactive Markov 
chains |[T3l[T6l using FuTS. Unlike many other stochastic process algebras, a single IML process can in 
general both perform action-based transitions and time-delays governed by exponential distributions. 

It will be notationally convenient to consider a (total and deterministic) FuTS as a tuple (S, (#;)" =1 ) 
with transition functions 9\ : S — > X; — > fS{S ,%{), i — \ ...n, rather than using the form (S, { >-^i) n i=l ) 
that occurs more frequent for concrete examples in the literature. Alternatively, using disjoint unions, 
one could see a FuTS represented by a function 9' : S — > (J)"=i -£i — * ©;=i FSiS^j) satisfying the 
additional property that 9'{s){l) e J r S(S,'Ri) if £ € As this fits less smoothly with the category- 
theoretical approach of Section |4| we stick to the former format. Note, an interpretation of a FuTS as a 
function 5 — > (J)"=i ~ * ^^(5,^,)) does not suit our purposes as the IML example above illustrates. 

We will use the notation with transition functions 9i : S — > £; — > fSiS^i) to introduce the notion 
of bisimilarity for a FuTS. 

Definition 2. Le? <S - (5, (#;)" =1 ) #e a FuTS over the label sets X, awe? semirings Ku i— 1 A« 
equivalence relation RQS xS is called an S-bisimulation ifR(s\,S2) implies 

L^kl, 0M)(O(O = 2> eMs ^teXOCO (i) 

/or all t e S, i - \ ...n and I e X;- Two elements s^,S2 € S are called S-bisimilar ifR{s\, $2) for some 
S-bisimulation Rfor S. Notation s\ ~s s%- • 

We use the notation to denote the equivalence class of t € 5 with respect to R. Note that sums in 
equation (jlj) exist since the functions 9i{sj){€) e !F<S( S,'/?,), i = l...n, j = 1,2, are of finite support. 
Hence, 9 t {sf){t){f) = e ft; for all but finitely many f e [t] R c 5 . 

For the combined FuTS of the two CCS-processes of Figure [T] the obvious equivalence relation relating 
b.O and b.O + c.O is not a FuTS-bisimulation. Although Zt'e[0h d(b.0)(b)(t') = 6(b.0)(b)(0) = true and 
Zr'e[0] R S(b.O + c.0)(o)(f') - <9(7j.O + c.0)(o)(0) - true, we have 2> e[0]s 0(fe.O)(c)(O - false, while 
Zfe[0]« 0(fc-O + c.0)(c)(t') - true, taking sums, i.e. disjunctions, in B. 

4 FuTS coalgebraically 

In this section we will cast FuTS in the framework of coalgebras and prove a correspondence result of 
FuTS-bisimulation and behavioral equivalence for a suitable functor on Set. 
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Definition 3. Let £, be a set of labels and let K be a semiring. The functor < v£ : Set — > Set assigns 
to a set X the function space J r S(X,'R)- i - of all functions <p : £, — > !F<S(X,7?) and assigns to a function 
f:X^Y the mapping *v£{f): TS(X,<R) L -> TS(,Y,<R) L where 

% x (/)(^)Cy) = Z. rt /-'(.v) rtW) 

for all ip € TS{X,K) L , ee£andyeY. • 

Again we rely on cp(€) e ( FS{X,'R) having a finite support for the sum to exist and for 'V^ being well- 
defined. In fact, we have spt(<V^ (/)(<£>)(/)) = {f{x) \ x e spt(<p)(£) }. 

As we aim to compare our notion of bisimulation for FuTS with behavioral equivalence for the 
functor 'V^ , given a set of labels X and a semiring *R, we need to check that < v£ possesses a final 
coalgebra. We follow the approach of @ . 

Lemma 3. Let Hbe a set of labels, "R a semiring. Then the functor on Set is bounded. □ 

Working with total and deterministic FuTS, we can interpret a FuTS S = (S, (#,)" =1 ) over the label sets 
£i and semirings Kj, i = \ ...n as a product 9\ x • • • x G n : S —> n"=i (-£;' ~~* FS^S of functions 
Q\ '■ S — > X/ — > fSiS^j). To push this idea a bit further, we want to consider the FuTS S = (S, )" =1 ) 
as a coalgebra of a suitable product functor on Set. 

Definition 4. Let S - (S , (9i)" =i ) be a FuTS over the label sets X; and semirings 'Rj, i = \..n. The 
functor % on S*tf is defined by % = n"=i T^' = II "=i ^( 1 .^i 

The point is, under conditions that are generally met, coalgebras come equipped with a natural notion of 
behavioral equivalence that can act as a reference for strong equivalences, in particular of bisimulation 
for FuTS. Below, see Theorem [5J we prove that <S-bisimilarity as given by Definition [2] coincides with 
behavioral equivalence for the functor 'Vs as given by Definition |4j providing justification for the notion 
of equivalence defined on FuTS. 

For the notion of behavioral equivalence for the functor 'Vs obtained from S to be defined, we 
establish that it possesses a final coalgebra. 

Theorem 4. The functor 'Vs has a final coalgebra. 

Proof. By Lemma |ij we have that each factor *V^ i of 'Vs is bounded, and hence possesses a final coal- 
gebra Lj by Theorem 2 It follows that also 'Vs has a final coalgebra £1$. Writing [•]]£ for the final 
morphism of a ^-coalgebra X into £1$, we have 

n s =IL£,x..-x n x„ and - I-JJ J R ' x • • • x 

as can be straightforwardly shown. □ 

Since the functor 'Vs of a FuTS has a final coalgebra, we can speak of the behavioral equivalence ~$ 
induced by 'Vs- Next we establish, for a FuTS S, the correspondence of <S-bisimulation ~s as given by 
Definition [2] and behavioral equivalence ~$. 

Theorem 5. Let S = (S, )" =l ) be a FuTS over the label sets X ; - and semirings Ki, i— I ...n. Then 
si ~s s 2 si &s S2, for all si,S2^S. 
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Proof. Let S\,S2 e S . We first prove si ~$ S2 => si ~s *2- So, assume si ~^ S2- Let RQ S xS be an 
«S-bisimulation with /?(si , £2)- Put = 8\ X • • • X 8 n . Note (5 , 8) is a "V^-coalgebra. We turn the collection 
of equivalence classes S /R into a "1^-coalgebra (S /R,9r) by putting 

^([*k)(O([f]«) = Ei' e [ / ] R 0i(j)(O(O and 6 R = 9 1 R x---xe n R 

for 5, ? € S , I € £,i, i- \ ...n. This is well-defined since R is an <S-bisimulation: if R(s, s') then we have 
T,f€[t] R #/( s )(0(0 - Tif€[t] R ^/(s'X^XO- The canonical mapping s R :S — > 5//? is a *l^-homomorphism: 
For i = l..,/!,feXj and f e 5 , we have both 

F<S( eR ,^) X '(WXOTk) - Zf era, fttoCW) and ^(M/e)(^)(W«) = Z^kl, Oi(s)(€)(f) 



Thus, rS(s R ,ni)foei = 9 r0£r . Since %(e*) - n" = i TS{s R ,Hi) £ - it follows that £ R is a %-homo- 



morphism. Therefore, by uniqueness of a final morphism, we have = \L'T\f /R ° £r- In particular, 
Pile = \Ls2Hf since s R (si) = e R (s 2 ). Thus, si s 2 . 



For the reverse, i.e. si «,5 52 *i ~s $2, assume s\ x s i.e. [[jiJ^ = [[^if ■ Since the map 
[•if : (S, 8) -> (Q 5 , w 5 ) is a ^-homomorphism, the relation 7? 5 with R s (s', s") o Q>'Tj| = \[s"]\f is 
an »S-bisimulation: Suppose Rs(s', s"), i.e. 5' ~^ 5", for some s', s" e S. Assume 8q s = 8^ x • • • x 0^. 

Pick 1 < i < n, £ e X;, ? e 5 . Put QXD;? -we £1$. Let [fJs denote the equivalence class of t in R$. 

Z*=m s 0«CO(O(*O 

= I* t > e([[ . ]i s ) - l(w) 8i(s'){0(t') (by definition of R s and w) 
= P'ls )(0(w) ( tt-lf is a %-homomorphism) 

- * 5 j" by assumption) 

- E fe( aif )-Hw) ^"X^XO ( Q>]]f is a %-homomorphism) 
= E ceWa Oi(s")(€)(f) (by definition of ff 5 and w) 

Thus, if R s (s',s") then Zm<] a WXW) = T,fe.[t\ s WWW) all i = 1 ...n, r 6 S, t e X, and 
R$ is an <S-bisimulation. Since [[tfijj = p 2 I]^, it follows that R$(si,S2). Thus R$ is an «S-bisimulation 
relating si and s 2 . Conclusion, it holds that si ~$ S2- □ 



5 FuTS Semantics of PEPA 

Next we will consider a significant fragment of the process algebra PEPA 0/71, including the parallel 
operator implementing the scheme of so-called minimal apparent rates, and provide a FuTS semantics 
for it. We will show that PEPA's notion of equivalence = pe p a , called strong equivalence in [17], fits with 
the bisimilarity ~ pepa as arising from the FuTS semantics. 

Definitions. The set Ppepa of PEPA processes is given by the BNF P ::= nil\(a,A).P\P + P\P\\ A P\X 

where a ranges over the set of actions 31, A over R>o, A over the set of finite subsets of 31, and X over 
the set of constants X. • 

PEPA, like many other stochastic process algebras (e.g. lfT51 couples actions and rates. The prefix 
(a, A) of the process (a,A).P expresses that the duration of the execution of the action a e is sampled 
from an exponential distribution of rate A. The parallel composition P |U Q of a process P and a process Q 
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(NIL) (RAPF1) — — (RAPF2) — b *° 

nil >4 p [] R>0 (a,A).P >A p [PhJ] >4 p 

e« P Q ^ MC , P* P P X:=P 



(CHO) g —. (CNS ) 



P + Q & p P + Q X h p 9 

(PARI ) ?h f Qh <> Q aiA (PAR2) Ph >? Q»' Q a€A 

P\\aQ » p (P\\aXq) + (Xp\\ a Q) P\\aQ »p arf(P,Q)-(P\\ A Q) 

Figure 2: FuTS semantics for PEPA. 

for a set of actions AQj{ allows for the independent, asynchronous execution of actions of P and Q not 
occurring in the subset A, on the one hand, and requires the simultaneous, synchronized execution of P 
and Q for the actions occurring in A, on the other hand. The Fu TS-semantics of the fragment of PEPA 
that we consider here, is given by the SOS of Figure [2| on which we comment below. 

Characteristic for the PEPA language is the choice to model parallel composition, or cooperation in 
the terminology of PEPA, scaled by the minimum of the so-called apparent rates. By doing so, PEPA's 
strong equivalence becomes a congruence ifTTl . Intuitively, the apparent rate r a {P) of an action a for a 
process P is the sum of the rates of all possible a-executions for P. When considering the CSP-style 
parallel composition P \\a Q, with cooperation set A, an action a occurring in A has to be performed by 
both P and Q. The rate of such an execution is governed by the slowest, on average, of the two processes 
in this respect]^] Thus r a (P \\a Q) for a € A is the minimum min{ r a (P), r a (Q)}. Now, if P schedules an 
execution of a with rate r\ and Q schedules a transition of a with rate r%, in the minimal apparent rate 
scheme the combined execution yields the action a with rate r\ • r% • arf(P, Q). Here, the 'syntactic' scaling 
factor arf(P, Q), the apparent rate factor, is defined by 

min{ r a (P),r a (Q)} 

arf{P, Q) = 

r a (P)-r a (Q) 

assuming r a (P),r a (Q) > 0, otherwise arf(P,Q) = 0. Thus, for P \\& Q the minimum min{r a (P), r a (Q)} 
of the apparent rates is adjusted by the relative probabilities r\/r a {P) and rz/rJJX) for executing a by P 
and <2, respectively. See IfTTl Definition 3.3.1] (or the appendix) for an explicit definition of the apparent 
rate r a of a PEPA-process. 

The FuTS we consider for the semantics of PEPA in Figure [2] involves a set of labels A defined by 
A = { 8 a | a € ${}. The symbol 8 a denotes the execution of the action a, with a duration that is still to be 
established. The underlying semiring for the simple FuTS for PEPA is the semiring R^o of non-negative 
reals. 

Definition 6. The FuTS S pepa = ("Ppepa, >-*p) over A and R^o has its transition relation given by the 
rules of Figure^ • 

l~l s a 

We discuss the rules of Figure pi The FuTS semantics provides nil >-> p []r >0 , for every action a, with 

[]r >0 tne 0-function AP.O of R^o- However, the latter expresses 9 pepa (m\)(8 a )(P') = for every a € 3\ 



2 One cannot take the slowest process per sample, because such an operation cannot be expressed as an exponential distri- 
bution in general. 
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and P' € Ppepa, or, in standard terminology, nil has no transition. For the rated action prefix (a, A) we 
distinguish two cases: (i) execution of the prefix in rule (RAPF1); (ii) no execution of the prefix in 
rule (RAPF2). In the case of rule (RAPF1) the label 8 a signifies that the transition involves the execution 
of the action a. The continuation [P i-> A] is the function that assigns the rate A to the process P. All other 
processes are assigned 0, i.e. the zero-element of the semiring R^o- In the second case, rule (RAPF2), 
for labels 6b with b^a,we do have a transition, but it is a degenerate one. The two rules for the prefix, 
in particular having the 'null-continuation' rule (RAPF2), support the unified treatment of the choice 
operator in rule (CHO) and the parallel operator in rules (PARI) and (PAR2). 

Note the semantic sum of functions P + Q replacing the syntactic sum in P + Q. The treatment of 
constants is as usual. Regarding the parallel operator \\a, with respect to some subset of actions Ac^, 
the so-called cooperation set, there are again two rules. Now the distinction is between interleaving and 
synchronization. In the case of a label 5 a involving an action a not in the subset A, either the P-operand 
or the <2-operand of P \\a Q makes progress. For example, the effect of the pattern P |U Xq is that the 
value P(P') • 1 is assigned to a process P' \\a Q, the value P(P') • = to a process P' \\a Q' for some 
Q + Q, and the value for a process not of the form P' \\a Q'- Here, as in all other rules, the right-hand 
sides of the transitions only involve functions in TS(Ppepa,^>o) and operators on them. 

For the synchronization case of the parallel construct, assuming P y^P and Q Q, the 'semantic' 
scaling factor arf(P,Q) is applied to P \\aQ (with \\a on TS(PpepaM>o) induced by \\a on Ppepa)- This 
scaling factor, defined for functions in TS(Ppepa, K-»o)> is given by 

f«D n\ rnin{©!P,©<2} 
arf{P, Q) = 



®P-®Q 

provided ®P, ®Q > 0, and arf(P, Q) - otherwise. This results for arf(P,Q) ■ (P |U<3), for a process R = 
Ri \\ A R 2 , in the value arf(P, Q)-(P \\ A Q)(R l \\ A R 2 ) = arf(P, Q) ■ P{R X ) ■ Q(R 2 ). 

The following lemma establishes the relationship between the 'syntactic' and 'semantic' apparent 
rate factors defined on processes and on continuation functions, respectively. 

Lemma 6. Let P e Ppepa and aej{. Suppose P y^ p P. Then r a {P) = ®P. □ 

The proof of the lemma is straightforward. It is also easy to prove, by guarded induction, that the FuTS 
Sp e p a given by Definition [6] is total and deterministic. So, it is justified to write S pepa = (Ppepa, d pepa ). 
We use ~ pepa to denote the bisimilarity induced by S pepa . 

Lemma 7. The FuTS 

•Spepa is total and deterministic. □ 

Example To illustrate the ease to deal with multiplicities in the FuTS semantics, consider the PEPA 

processes Pi = (a,A).P and P 2 - (a,A).P + (a,A).P for some P e Ppepa- We have Pi >-> p [P i-» A] by 

rule (RAPF1), but P 2 >\ [P h-> 2 A] by rule (RAPF1) and rule (CHO). The latter makes us to compute 
[P h-> A] + [P h-> A], which equals [Pi-> 2A]. Thus, in particular we have Pi + pepa Pi- Intuitively it is clear 
that, in general we cannot have P + P ~ P for any reasonable quantitative process equivalence ~ in the 
Markovian setting. Having twice as many a-labelled transitions, the average number for (a,A).P+(a,A).P 
of executing the action a per time unit is double the average of executing a for (a,A).P. 

The standard operational semantics of PEPA lPT7l[T8l is given in Figure [5] The transition relation — > c 
Ppepa x ( 3\ x R>o ) x Ppepa is the least relation satisfying the rules. For a proper treatment of the rates, 
the transition relation is considered as a multi-transition system, where also the number of possible 
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a.A , a, A 

P -» P' 0^0 

(RAPF) — (CHOI) : (CH02) — ^ - t 

a.A a.A , a.A 

(a,A).P^P P + Q^P' P + Q^P' 

(PARI a) pa4p '^ A (PARlb) Q~* Q' a t A (CNS) Z^' 



p\\aQ^p'\\aQ PWaQ =» PWaQ x a 4p' 

a,A\ a^2 

(PAR2) P - P Q f Q a€A A = arf(P, Q)-A, -A 2 
PWaQ ± P'WaQ' 

Figure 3: Standard semantics for PEPA. 

a.A 

derivations of a transition P — > P matters. We stress that such bookkeeping is not needed in the FuTS- 
approach at all. In rule (PAR2) we use the 'syntactic' apparent rate factor for PEPA processes. 

The so-called total conditional transition rate q[P,C,a] of a PEPA-process llT7l[T8Tl for a subset of pro- 
cesses C c P PEPA and a e 2K is given by q[P, C,a] = £ q&c Zfl ^ I P Q ft- Here » fl P Q I) is th e multiset 

of transitions P A g and {| /I | P g |} is the multiset of all /Ts involved. The multiplicity of P A Q is 
the number of different ways the transition can be derived using the rules of Figure [3] We are now ready 
to define PEPA's notion of strong equivalence lPT7llT8l . 

Definition?. An equivalence relation R<z'Pp E p A x'P 'pepa is called a strong equivalence if q[P\,[Q]R,a] = 
q[Pi, [Q]r,o] far all P\,P2 € Ppepa such that R(P[,P2), all Q € Ppepa and all ae^l. Two processes 
P\,P2 € Ppepa are strongly equivalent if R{P\,P2) for a strong equivalence R, notation P\ = pe pa Pi- • 

The next lemma couples, for a PEPA-process P, an action a and a function P € < FS(Ppepa,^o), the 
evaluation P(P') with respect to the Eu TS-semantics to the cumulative rate for P of reaching P' by a 
transition involving the label a in the standard operational semantics. 

Lemma 8. Let P e Ppepa and aeJl Suppose php. Then it holds that P(P') = £ {\ A \ P "-4 P' \} for 
all P' € Ppepa- □ 

With the lemma in place we can prove the following correspondence result for iSp epfl -bisimilarity with 
respect to the FuTS for PEPA of Definition [6] and strong equivalence as given by Definition [7] 

Theorem 9. For any two PEPA-processes P\,P% e Ppepa it holds that Pi ~ pepa P2 iff Pi —pepa Pi- 

Proof. Let R be an equivalence 1 
Thus e pepa (P)(6 a ) = P- We have 



Sa 

Proof. Let R be an equivalence relation on Ppepa- Choose P,Q e Ppepa and ae^l. Suppose P y^ p P. 



q[P,[Qh,a] = Efl'EiGkEUIP^G'D (by definition q[P,[Q]n,a] 
= EcEifikW) (byLemma[8]> 
- £ Q'etQjj, O pepa (P)(a)(Q') (by definition 6> pe/ , fl ) 

Therefore, for PEPA-processes Pi and P2 it holds that g[Pi, [<2]#,a] = q[Pi, [Q]R,a] for all Q e Ppepa, 
aetf. iff Z Q , e[Gk W a(Pi)(a)(eO = Z G < e[Qk G pepa {P 2 ){d){Q') for all 2 e Ppepa, a e 31. Thus, the 
equivalence relation R is a strong equivalence iff R is an S pepa -bisimulation, from which the theorem 
follows. □ 
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(NIL1 ) ^5 (NIL2) (APF3) - 



S / 5 

ml >->i []b nil ^ 2 []r s0 clP ^2 [k s0 

b # a a £ J?[ 
(APF1) (APF2) ^ (RPF1) -f- (RPF2) 

a.P Ai [P i — > true] a.P A; [] B i.P Ai [] B A.P A 2 [P h-> A] 

(PAR 1 ) 5 (i =1,2) (PAR2) — — ^ — 

PWaQ A, (f»||A^) + (^IUQ) PWaQ A, f>|| A Q 

PhiP Q A; (3 P y%j P X := P 
(CHO) - ^ - (i = 1,2) (CON) ^- (i = 1,2) 

P + Q y->i P + Q X y^jP 

Figure 4: FuTS semantics for IML. 

In view of our general correspondence result Theorem [5] the above theorem shows that PEPA's strong 
equivalence — pepa is a behavioral equivalence, viz. behavioral equivalence ~ pepa with respect to the func- 
tor of S pep a, and that its standard, FuTS and coalgebraic semantics coincide. 

6 FuTS Semantics of IML 

In this section we provide a FuTS semantics for a relevant part of the language of IMC [13]. IMC, In- 
teractive Markov Chains, are automata that combine two types of transitions: interactive transitions that 
involve the execution of actions and Markovian transitions that represent the progress of time governed 
by exponential distribution. As a consequence, IMC embody both non-deterministic and stochastic be- 
haviour. System analysis using IMC proves to be a powerful approach because of the orthogonality of 
qualitative and quantitative dynamics, their logical underpinning and tool support. A number of equiva- 
lences, both strong and weak, are available for IMC iPTOl . In our treatment here, dealing with a fragment 
we call IML, we do not deal with internal r-steps and focus on strong bisimulation. 

Definition 8. The set 9 mL of IML processes is given by the BNF P : := nil\ a.P\ A.P\ P + P \ P \\ A P \ X 

where a ranges over the set of actions 3\, A over R>o, A over the set of finite subsets oftft and X over the 
set of constants X. • 

In IML there are separate prefix constructions for actions a.P and for time-delays A.P. No restriction 
is imposed on the alternative and parallel composition of processes. For example, we have the process 
P - a.A.niX + //Anil in IML. It should be noted that for IMC actions are considered to take no time. 

Definition 9. The formal semantics ofPiML is given by the FuTS Si m i = (Pjml, >-*i> ^2) over the label 
sets and A = { 5 } and the semirings B and R>q with transition relations >— > 1 c Piml x J?l x TS^Pjml > B ) 
and >— >2 £ "Piml x A x T'S{'Piml^>q) defined as the least relations satisfying the rules of Figure^ • 

To accommodate for action-based and delay-related transitions, the FuTS Simi is non-simple, having the 
two transition-to-function relations >-» 1 and >->2- Actions aejl decorate >-» 1 , the special symbol 5 deco- 
rates >->2- Note rule (APF3) and rule (RPF1) that involve the null-functions of IR^o and of B, respectively, 
to express that a process a.P does not trigger a delay and a process A.P does not execute an action. For the 
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p ^ p r\ ^ u p j fy v ._ p 

(APF) (CHOI) (CH02) (CON1)- 



a.P -> P P + Q^> R P + Q -> R X^> Q 

(PAR la) P ^ P ' aiA (PARlb) Q ^ Q ' a * A (PAR2) P ~* P ' Q ~* Q *±A 

P\\aQ^,P'\\aQ PWaQ^PWaQ' PWaQ^P'WaQ' 

P ♦ R O * R P \ O X m = P 
(RPF) (CH03) : (CH04) — ^ (CON2) ^- : 

A.P -*P P + Q -> R P + Q --» X --» g 

P -* P' Q ■■* Q' 

(PARlc) (PAR Id) k 



p iu q ■-» f iu e piiaG -•♦ p iu g' 

Figure 5: Standard SOS rules for IML. 

parallel construct \\ A , interleaving applies both for non-synchronized actions a $ A as well as for delays 
(but not mixed). Therefore, rule (PARI) pertains to both >->i and >-»2> with a ranging over JlU A. The 
same holds for non-deterministic choice, rule (CHO), and constants, rule (CON). Finally, IML does not 
provide synchronization of delays in the parallel construct. Rule (PAR2) only concerns the transition re- 
lation >->2- In rule (PARI), for clarity, we decorated the characteristic functions, writing X l p , for i = 1,2, 
for X P = [P i-» true] in TS(P IM l,V>) and X P = [P \-> 1 ] in TS(P IM lM>o)- 

Example Assume X := a.A.b.X and Y := a./u.b.Y. Put A = {a,b}. Then we have 

X|| A y Aj |U/i.6.yi-» true] ^.fc.Z || A /xAF £ 2 [2>.X|U/^.Fi-> A, /LfcJf |U 

fe.Z|| A fe.yAi[ X|| A F ^true] b.X\\ Al x.b.YA 2 [b.X\\ A b.Y h> fx] 

A.b.X\\ A b.Y £> 2 [b.X\\ A b.Y ^A] 



It is not difficult to verify that Sm is a total and deterministic FuTS. Below we use Sm = (Piml, Q\,Qi) 
and write ~m for the associated bisimilarity. 

Lemma 10. The FuTS Sm is total and deterministic. □ 
The standard SOS semantics of IML |fT3l is given in Figure [5] involving the transition relations 
-> c <P IML xJlx 9 iML and - * c <P IML x R >0 x P IML 

Below we will use the functions T and R based on -> and- »,cf. DID- We have T: P IM l X ^ X 2^ iML -> B 
given by T(P,a,C) = true if the set {P' e C | P — > P' } is non-empty, for all P € Piml, a ej{ and any 

subset C c P lML . For R: Piml* Piml -> R^o we put R(P,P') = £ || /I | P ~» P' |). Here, as common 
for probabilistic and stochastic process algebras, the comprehension is over the multiset of transitions 

leading from P to P' with label A. We extend R to P mL x 2 P ' ML by R(P, C) = £ p'ec X II ^ I P ~* P' I 

For IML we have the following notion of strong bisimulation |[T3l |T6l that we will compare with the 
notion of bisimulation associated with the FuTS Sm- 
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Definition 10. An equivalence relation R c Pjml x Piml is called a strong bisimulation for IML if, for 
all Pi , P2 € Piml it holds that 

• for alia eft and QeP 1ML : T{P u a,[Q\ R ) <=> T(P 2 ,a,[Q] R ) 

• for all Q € <P lML : R(P U [Q] R ) = R(P 2 , [Q] R ). 

for all P\,P 2 e Piml such that R(P\,P2). Two processes Pi,P 2 £ Piml are called strongly bisimilar if 
R(P\ , Pi) for a strong bisimulation Rfor IML, notation P\ =, m ; P2. • 

To establish the correspondence of FuTS bisimilarity ~ !m / for Sm of Definition [9] and strong bisimilar- 
ity -iml for IML, we need to connect the state-to-function relation >->i and the transition relation — > as 
well as the state-to-function relation >->2 and the transition relation -->. 

Lemma 11. 

(a) Let P € ViMh and a eft. If P >^ -p then P A P' <^> -p(P') - true. 

(b) Let P e P IML ■ IfP >^2 P then Ell A | P -i P' ft = ^(P')- □ 
We are now in a position to relate FuTS bisimulation and standard strong bisimulation for IML. 
Theorem 12. For any two processes P\,P2^ Piml it holds that Pi ~j m i P2 iff Pi —iml Pi- 

Proof. Let 7? be an equivalence relation on Pjml- Pick P e Piml, a e and choose any Q e P\ml- 

a 

Suppose P >->P. Thus 6i(P)(a) - P. Then we have 

T(P,a,[Q] R ) o 3Q' €[Q] R : P^Q' (by definition of T) 

<=> 32' e [Q] R : P(Q') = true (by Lemma[TT]i) 
<=> X Q'etQ]* f 1 (P)(a)(Q) - true (by definition of 0\ ) 

Note, summation in B is disjunction. Likewise, on the quantitative side, we have 

R(P,[Qh) = Ze^ZMIP-^e'll (by definition of R) 
= Z Q 'e [Q]R P(Q') (by LemmafTTjD) 

= I,Q'e[Q ]R ei(P)(S)(Q) (by definition of 6 2 ) 

Combining the equations, we conclude that a strong bisimulation for IML is also a bisimulation for the 
FuTS Sm, and vice versa. From this the theorem follows. □ 

Again, as a corollary of the theorem above, we have for IML that its notion of strong bisimulation is coal- 
gebraically underpinned, as it coincides, calling to Theorem [5] once more, with behavioral equivalence 
of the functor "V,,,,/ induced by the FuTS <S, m /. As a consequence, the standard, FuTS and coalgebraic 
semantics for IML are all equal. 

7 Concluding remarks 

Total and deterministic labeled state-to-function transition systems, FuTS, are a convenient instrument 
to express the operational semantics of both qualitative and quantitative process languages. In this paper 
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we have introduced the notion of bisimulation that arises from a FuTS, possibly involving multiple tran- 
sition relations. A correspondence result, Theorem[5J relates the bisimulation of a FuTS S to behavioral 
equivalence of the functor 'Vg that arises from the FuTS S too. For two prototypical stochastic process 
languages based on PEPA and on IMC we have shown that the notion of stochastic bisimulation associ- 
ated with these calculi, coincides with the notion of bisimulation of the corresponding FuTS. Using these 
FuTS as a stepping stone, the correspondence result bridges between the concrete notion of bisimulation 
for PEPA and IMC, and the coalgebraic notion of behavioral equivalence. Hence, from this perspective, 
the concrete notions are seen as the natural strong equivalence to consider. 

It is shown in 0, in the context of weighted automata, that in general the type of functors TS^-, < R) 
may not preserve weak pullbacks and, therefore, the notions of coalgebraic bisimulation and of behav- 
ioral equivalence may not coincide. Essential for the construction in their setting is the fact that the sum 
of non-zero weights may add to weight 0. The same phenomenon prevents a general proof, along the 
lines of Il28l . for coalgebraic bisimulation and FuTS bisimulation to coincide. In the construction of a 
mediating morphism, going from FuTS bisimulation to coalgebraic bisimulation a denominator may be 
zero, hence a division undefined, in case the sum over an equivalence class cancels out. In the concrete 
case for |fl9l , although no detailed proof is provided there, this will not happen with R^o as underlying 

semiring. We expect that for semirings enjoying the property that for a sum x-x\-\ 1- jc„ it holds that 

x = iff x, ; = for all i - l...n, we will be able to prove that pullbacks are weakly preserved, and hence 
that coalgebraic bisimulation and behavioral equivalence are the same. 

Obviously, Milner-type strong bisimulation ETl 1221 and bisimulation for FuTS over B coincide. 
Also, strong bisimulation of ifPTI involving, apart from the usual transfer conditions, the comparison of 
state information, viz. the apparent rates, can be treated with FuTS. Again the two notions of equivalence 
coincide. We expect to be able to deal with discrete time and so-called Markov automata as well. For 
dense time and general measures one may speculate that the use of functions of compact support with 
respect to a suitable topology may be fruitful. Future research needs to reveal under what algebraic 
conditions of the semirings, or similar structures, or the coalgebraic conditions on the format of the 
functors involved standard bisimulation, FuTS-bisimulation, coalgebraic bisimulation and behavioral 
equivalence will amount to similar identifications. 
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A Additional proofs 
Additional proof for Section [2] 

Lemma [I] Let X be a set, K a semiring and | an injective binary operation on X. For (p,if/ e fSiX,^) it 
holds that ©(</> + ip) = ®<p + ®ifj and ®(tp \ if/) - {®ip) * (ffii/0. 

Proof. We verify ®(cc | tA) = (®c/>) * (®i/0 for arbitrary ip,if/ e TSiX,^). 

(©</?)* (©(A) 

= (2 *! ex ¥>(*i))* (E^ex^fe)) (by definition ©) 
= 2 Xl ,x 2 ez <P( x i) * 'Afe) (by distributivity of * over +) 

= I,x€X,x=xi\x2 y(*i)*^(*2) (by injectivity of I ) 

= Z jcex.^ijsa Oi I <A)<X> ( b y definition of <p \ if/) 

= I .vex ft> I <A)W (since (cp | </>)(*) = if * * I" 1 00) 

The fact ©(co + if/) = fficc + (Bif/ follows direct from the definitions and commutativity of +. □ 

Additional proof for Section [4] 

Lemma|3j Let X be a set of labels and K a semiring. Then functor < y£ on Set is bounded. 

Proof. Consider the elements v e !F<S(N,'7?)' C as parametrized 'valuation' functions, and the elements 
cr € X N as 'selection' functions. The functor r5(N,^) x x (-) N : Set -> Set is the product functor of 
the lifting idj^Q^^yc of the identity functor id<FSQ$,K) to X and of the functor (-) N - Define the mapping 
V ■ id rs(m)J: x (-) N -» *V£ by putting 

T] X (v,o-)(£)(x) = T Jneo -i (x) v(£)(n) 

for v € ^(N,^)^, cr e Z N and £ e £. For ^ € £ and x e X, the right-hand sum defining rjxiy, o~){l){x) ex- 
ists, since v(l) : N — > K is of finite support. Note that T]x(v,o-)(£) is of finite support too: If ?/x(v,cr)(^)(x) 
+ 0, by definition v(f)(n) | « € o" _1 (x) } + 0. Then v(^)(n) + for some « e cr _1 (x). Thus, cr(n) = x for 
some 72 € spt{v{i)). So, spt( ?7x(v, cr) ) c {cr(n) | n e spt{v{£)) } and spt( ?7x(v, cr) ) is finite. 

Next we verify that 77 : id^^^z x (-) N — > T^" is a natural transformation, i.e. we check that for 
/ : X -» y it holds that ^o^^yoj id rsmm t, / N >. 

FS(N,1l) c x A' N ► J5(N,K) £ x Y" K 



TS(X,K) L — — -JS{y.R) £ 

For v € r<S(N,^) x and cr € X N we have, for ^ e £ and y € F, 

(r<S(/,^) £ o ?7x )(y,cr)(0(y) 

= Z*6/-l(y)*7x(v,O-)(0(x) - Exe/-!(y) Zne<H(*) V (£>(") 

= Enec/o^-i vtf)(n) - i77(v,/otr)(0(y) 

= m ( (M*S(N.*y: X / N )(V, (r)){€)iy) = (77F°(^ r< s ( N,«)XX/ N ))(v,cr)(^)(v) 
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Thus, TS(f,'R)- i 'oT]x = riY (id< FS ( ¥S < R ^ ) £Xf ¥S ) and r\ : id rS( ^ s , R) £X(-) N — > *v£ is a natural transformation. 

Finally, we check that t]x '■ idjrscsjiyt X ^ N —> 'VdQO is surjective. Choose a set X and a mapping 
tp : X — > fSiX^). Say, spt{(p{()) = {jq,.. ■ Without loss of generality we assume X £ spt{ip(£)) 

and pick x^ e X\spt((p(€)). Define v e :FS(N,ft) x by v(£)(n) - <KO(4) for « = 1 ■ ~n(fi) and = 

otherwise. Define o~ : N — > X by cr(«) = x^ for 1 < n < and cr(n) = x^ otherwise. Then we have 

rix<v,<r)(£){xf) = Z mecr -i ( ^v(€)(m) - v(£)(i) = <p(€)(xf) 

T]x(v,0-)(()(x) = Itmetr-Hx) V(€)(m) = Z n eN\{ 1,...^)) HO(n) = 

for i = 1. ..«(/) and x £ spt(v(0). Thus t] X ( v,cr)(£)(x) = <p(£)(x) for all € e £ and x e X, rj x { v,cr) = tp 
and tjx '■ J^V.S(N,7?) £ X ^ N ~* i s surjective. □ 

Additional proofs for Section [5] 
Definition.|H7l Definition 3.3.1] We put 

r u (nil) = r a (P+Q) = r a (P) + r a (Q) 

r a ((a,A),P) = A r a {P\\ A Q) = r a (P) + r a (Q) ifa£A 

r a ((b,A).P) = forZ7^a r a (P\\ A Q) = min{ r a (P), r a (Q) } ifaeA 

r a (X) = r a {P) ifX:=P 



Lemma 



Let P € Ppepa and a e 9K. Suppose P h p P. Then ®P = r a (P). 



Proof. Guarded recursion. We treat the two cases for the parallel construct. 

Case P- Pi \\ A P 2 ,atA. Suppose/ 3 ! h p p u P 2 h p p 2 . Then*> = (Pi || A *p 2 ) + (* Pl \\ A P 2 ). 
Therefore we have 

®P = ®{Pi\\aXp 2 ) + (X Pi WaPi) 

= ©(Fi |U Xp 2 ) + ®(X Pl \\ A Pi ) (by Lemma[T]> 

- {®Pi-®Xp 2 ) + {®X Pl -®P 2 ) (byLemma[I]> 

= ®P\ + @P 2 (since ®X Pl ,®Xp 2 = 1) 

= r a {P\) + r a (P 2 ) (by the induction hypothesis) 

= r fl (Pi|UP 2 ) (by definition r fl ) 

CaseP = Pi \\ A P 2 ,aeA. Suppose/ 3 ! h p p x , P 2 h p p 2 . Then P = arf(P u P 2 ) ■ {P x \\ A P 2 ). If 
®Pi,®P 2 > we have 

©P - ©(arfiTi.f^HPilU^) 

= arf(£ > i,f > 2)-©f , i-©f , 2 (byLemma[I]> 

min{ffiPi,©P 2 } 
= ®P i • 2 (by definition of arf) 

©Pl-©P 2 ) 
= rmn{©Pi,©P 2 } 

= min{ r a {P\), r a {P 2 ) } (by the induction hypothesis) 

= r a (Pi\\ A P 2 ) (by definition r a ) 
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If = 0, then aif(P\,P2) = 0, by definition, and r a (P l ),r a (P 2 ) - 0, by induction hypothesis. 

Therefore we have ®P = arf(P u P 2 ) ■ ®9i • ®P 2 = as well as r„(Pi \\ A P 2 ) = min{r a (Pi), r a (P 2 )} = 0. 
So, also now, ©!P = r a {P\ \\ A Pi)- The other cases are straightforward, in the case of P\ + P 2 also relying 
on Lemma Q] □ 



Corollary. If P h V and Q h Q, then arf(P,Q) = arf(P, Q). 



Proof. Direct from the definitions. 



Lemma Let P e P PEPA and cteJl. Suppose P & 9. Then it holds that P(P') = £ fl A \ P "4 F ft for 
all P' e p PEPA . 



Proof. Guarded induction on P. We only treat the cases for the parallel composition. Note, the op- 
eration |U : PpepaX'Ppepa -> Ppepa with \\a(P\,Pi) = Pi \\a Pi is injective. Recall, for Pi,P 2 e 
rS(P PEPA ,R>o), we have (Pi UPiWl WaP%) = Pi{Pl) -Pi^i). 

Suppose a<t3\. Assume Pi >-» , P 2 >-> "p2> Pi IU Pi >-» P- We distinguish three cases. Case (I), 
P' = p'j || A p 2 , p' x 4. Pj. Then we have 

ZUI^i IUP 2 ^P' I) 

- I Pi ^ P; |} (by rule (PAR la)) 

= Pi(P[) (by the induction hypothesis) 

= Pi(P[)-X Pl (P 2 ) (as X Pt {P 2 ) = 1) 

- (Pi IU *p 2 )(^ IU ft) + (#p, IU P 2 )(P; IU P2) 

(definition |U on TS(P PEPA ,R>o), X Pl (P[) = 0) 

- P(P') (by rule (PARI) 

Case (II), P' = Pi |U P' 2 , P' 2 * P 2 : similar. Case (III), P' = Pi || A P 2 - Then we have 

EU|Pi IUP2 ^P' II 
= (ZU\ Pi ^ Pi ft) + P2 ^ ^2 ft) (by rules (PAR la) and (PAR lb)) 

= Pi(Pi) + P 2 (P 2 ) (by the induction hypothesis) 

= |U *p 2 )(Pi IU P 2 ) + (*p, IU P2XP1 IU Pi) 

(definition |U on TS(PpepaM>o), X Pl (Pi), X Pl (P 2 ) = 1) 
= -P(P') (again by rule (PARI) 



Suppose aeA. Assume Pi>^>Pi,P 2 >^>P 2 , Pi IU Pi ^ P- Without loss of generality, P' = P\ \\ A P' 2 
for suitable P\ , P' 2 e P PEPA . 
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a,A 

\aP 2 ^P' 



= Zflarf(P 1 ,P 2 )^ 1 -A 2 |Pi 

a,A 



a, At 



a,Ai 



P\,P2 ^ K 



(by rule (PAR2)) 



= arf(P u P 2 ) ■ (S Ui I Pi ^ P'x ») • (E (I ^2 I P 2 ^ P 2 I) ) (by distributivity) 

= arf(Pi , P 2 ) • Pi (P[ ) • P%(P' 2 ) (by the induction hypothesis) 

= arf{Pi,P 2 )-Pi{P\)-P2{P' 2 ) (by the corollary above) 

= arf{PuP%) ■ {Pi IU PiW\ IU P' 2 ) (definition |U on TS(P PEPA , R >0 )) 

= P(P') (by rule (PAR2) 

The other cases are simpler and omitted here. c 



Additional proofs for Section [6] 
Lemma HT1 

(a) Let P € Piml and a e 3K. If P Ai P then P A P' <^> P(P') = true. 

(b) Let P e -P /ML . If P ~ 2 IP then 2 {] A \ P --* P' |} - P(P'). □ 

Proof, (a) Guarded induction. Let ae^l. We treat the typical cases A.P and Pi |U Pi for a <f. A. 

Case A.P. Suppose A.P A IP. Then we have P = [] B . Thus, both /LP A P' for no P' e !P JML , as no 
transition is provided in — >, and !P(P') = false by definition of []b, for all P' € Pjml- 

Case Pi |U P 2 , a £ A. Suppose Py £>Pi, P 2 £> P 2 and Pi || A P 2 A P. Then it holds that V = 
(Pi \\ A Xp 2 ) + (X Pl UPz). Recall, for 2 € <P IML and * e € TS{P IML ,B), X Q {Q') = true iff Q' = Q, 
for 2' € P IML . We have 



Pi IU P2 -> P' 



up;) 



>p;) 



Pl^P\AP'=P\ |UP 2 ) V (P 2 ^P' 2 AP' =Pi 
by analysis of — >) 

IP^P;) = true A P' = P; || A P 2 ) V {P 2 {P' 2 ) = true AP' - P\ 
by the induction hypothesis) 

Pi (PI ) -*p 2 (P 2 ) = true A P' = P; || A P 2 ) V (* Pl (PD • :P 2 (P^) = true A P' = Pi || A P 2 ) 

by definition of X Pl and X Pl ) 

{Pi lU^XP; IUP 2 ) - true A P' =P; || A P 2 ) 

V((* Pl WaPiWi IUP 2 ) = trueAP'-P 1 \\ A P' 2 ) 
by definition of |U) 

Pi IU*P 2 )(P') = true V (X Pl \\ A P 2 )(P') = true 
by definition of |U, X Pl and X Pl ) 
{Pi WaX P2 ) + (X Pl \\ A P2)){P') = true 
by definition of + on TS{P IM l3)) 
P(P') = true 
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The other cases are standard or similar and easier. 

6 

(b) Guarded induction. We treat the cases for fi.P and Pi \\ A Pi- Case [i.P. Assume P >-> 2 e P- 
Suppose P - n.P . Then it holds that P admits a single --> -transition, viz. P -> P . Thus we have 
2P|P">i"B = /i = [P' ' — ^ ju](P') = !P(P')- Suppose P - ii.P" for some P" * P. Then we have 

Hfl/i|P">p'|} = = VP" »nW) = W). 

Case Pi |U P 2 - Assume Pi ~ 2 Pi, P2 ~2 ^2 and Pi \\ A P 2 ~ V. It holds that V = (!Pi \\ A X ?2 ) + 
(X Pl WP2). We calculate 

ZU\Pi IUP2 ->P' I) 

= I M I Pi -> p; , P' - p; IU P 2 B + Z U I P 2 -> P 2 , P' = Pi IU P 2 1) 

(by analysis of -->) 
= (ifP'=P'j || A P 2 -thenX{mPi -i P\ |} else end) + 

(if P' = Pi |U P' 2 then Z (Ml P 2 -> P' 2 |} else end) 
= (ifP'=P'j || A P 2 then !Pi(P'j) else end) + 

(if P' =Pi \\ A P' 2 then :P 2 (P 2 ) else end) 
(by induction hypothesis for Pi and P 2 ) 
- (Pi\\aXp 2 )(P') + (X Pi \\aP2)(P') 

(by definition of \\ A , Xp l ,Xp 2 and + on TS{PjmlM>o)) 
= P(P') 



The remaining cases are left to the reader. 



□ 



